{"version":1,"type":"rich","provider_name":"Libsyn","provider_url":"https:\/\/www.libsyn.com","height":90,"width":600,"title":"A Client Said No Twice to a VPN Prompt, and the Login Traced Back to a Chinese Net Block","description":"On Monday, a client of Craig's was driving down the road when a prompt appeared in the authentication app on his phone: was he trying to log into the company VPN? He said no. It appeared again. He said no again. Craig's team got him on the phone, changed his passwords, and started digging. The login was coming from a data center in New York \u2014 until Craig looked at the actual net block, which traced back to China. The attacker already had the man's email address, his VPN contact information, and his password. The prompt on his phone was the only thing standing in the way, and it worked because he answered it honestly twice. Where did they get it all? Craig ran the deep dark-web research his team does for clients and found the whole set sitting there. His advice to listeners is the free version of that same check: haveibeenpwned.com, run by Troy Hunt out of Australia \u2014 type in your email address and see where your information has already been taken. Craig spelled it out on air, P-W-N-E-D. The segment opened somewhere else entirely, on Flock cameras. Matt had raised them earlier in the show, and Craig's point was about scope rather than intent: these cameras don't only read license plates, they carry technology that listens for your phone pinging on Bluetooth and Wi-Fi, which means they can identify you in a different car and tie it all together. New Hampshire bars the state from using them \u2014 and private companies can. Craig's read on why this keeps expanding is refreshingly unconspiratorial: "The number one job of every employee is don't get fired. Number two job is make my job more important." The incentives point one direction whether or not anyone is plotting. Also in this segment: Craig's worry that people have simply given up \u2014 federal employees and military whose whole background check is already out there, throwing their hands up \u2014 and his argument that resignation is the one response that guarantees it gets worse Apple's handoff from Tim Cook to new CEO John Ternus, and why Craig thinks an engineer at 51 is good news: Cook was an operations man executing a 10-year plan Steve Jobs left behind, and the rumor is Ternus clears out the stale operations layer OpenAI's claim that Apple has only itself to blame in their trade-secret fight \u2014 Craig disagrees flatly, pointing to former employees' laptops and evidence about subverting Apple's internal security Matt's aside about watching an older movie and realizing a getaway driver today would have nowhere to hide, and Craig's answer: Minority Report, billboards recognizing Tom Cruise by face and serving him ads Free newsletter and Insider Session announcements: CraigPeterson.com ","author_name":"Craig Peterson - Secure Your Business, Your Privacy, and Save Your Sanity","author_url":"https:\/\/cptt.libsyn.com\/podcast","html":"